From owner-cvs-src@FreeBSD.ORG Sat Dec 3 00:41:01 2005 Return-Path: X-Original-To: cvs-src@FreeBSD.ORG Delivered-To: cvs-src@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7BAC916A41F; Sat, 3 Dec 2005 00:41:01 +0000 (GMT) (envelope-from ache@nagual.pp.ru) Received: from nagual.pp.ru (nagual.pp.ru [194.87.13.69]) by mx1.FreeBSD.org (Postfix) with ESMTP id C582243D5C; Sat, 3 Dec 2005 00:41:00 +0000 (GMT) (envelope-from ache@nagual.pp.ru) Received: from nagual.pp.ru (ache@localhost [127.0.0.1]) by nagual.pp.ru (8.13.4/8.13.4) with ESMTP id jB30ewbZ025451; Sat, 3 Dec 2005 03:40:58 +0300 (MSK) (envelope-from ache@nagual.pp.ru) Received: (from ache@localhost) by nagual.pp.ru (8.13.4/8.13.4/Submit) id jB30ewmf025450; Sat, 3 Dec 2005 03:40:58 +0300 (MSK) (envelope-from ache) Date: Sat, 3 Dec 2005 03:40:58 +0300 From: Andrey Chernov To: Doug Barton Message-ID: <20051203004057.GA20872@nagual.pp.ru> Mail-Followup-To: Andrey Chernov , Doug Barton , src-committers@FreeBSD.ORG, cvs-src@FreeBSD.ORG, cvs-all@FreeBSD.ORG References: <200512022006.jB2K67AK078509@repoman.freebsd.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200512022006.jB2K67AK078509@repoman.freebsd.org> User-Agent: Mutt/1.5.11 Cc: cvs-src@FreeBSD.ORG, src-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG Subject: Re: cvs commit: src/etc rc rc.shutdown rc.subr src/etc/rc.d localpkg src/sys/sys param.h X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Dec 2005 00:41:01 -0000 On Fri, Dec 02, 2005 at 08:06:07PM +0000, Doug Barton wrote: > This dramatically changes the behavior of rc.d/localpkg, as > all "local" scripts that have the new rc.d semantics are now > run in the base rcorder, so only scripts that have not been > converted yet will run in rc.d/localpkg. I don't inspect this changes yet, but please don't forget that even converted to rc.d local scripts are not as safe as system ones and must run in the subshell to avoid various environment damaging. F.e. apache change limits to user www. If it happens in the main rc shell, all following scripts will suffer. There are other examples. I remember we already hit this problem before, attempting to do similar conversion. -- http://ache.pp.ru/